Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Ransom Note: README_NBLOCK.txt

Group: Nblock

All your files are locked with AES-256.
Do NOT delete or modify key.bin - It is your only recovery tool.
Do NOT panic, To Get your files Back To its Original form you need a decryptor which we have, Read instructions below for decryptor!
Install Tor Browser: https://torproject.org/ 
Visit For Negotiation: http://nblockn6jjp3xxh2do4ckkcer7w54sube7jdqaq7ttfvucgz6nsi4fad.onion/index.php?id=[snip]

Indicators of Compromise
Type IOC
onion url http://nblockn6jjp3xxh2do4ckkcer7w54sube7jdqaq7ttfvucgz6nsi4fad.onion/index.php?id=[snip]